umpordez 1.5.0 → 1.6.1

package/.claude/settings.local.json

@@ -57,7 +57,26 @@
       "Bash(git *)",
       "Bash(npm init *)",
       "Bash(awk 'NR>=383 && NR<=386 {print NR\": \"substr\\($0,1,120\\)}' '/Users/ligeiro/dev/umpordez-cli/template/mobile/{{PROJECT_SLUG}}/src/pages/auth/AuthLanding.tsx')",
-      "Bash(awk 'NR>=394 && NR<=410 {print NR\": \"substr\\($0,1,100\\)}' '/Users/ligeiro/dev/umpordez-cli/template/mobile/{{PROJECT_SLUG}}/src/pages/auth/AuthLanding.tsx')"
+      "Bash(awk 'NR>=394 && NR<=410 {print NR\": \"substr\\($0,1,100\\)}' '/Users/ligeiro/dev/umpordez-cli/template/mobile/{{PROJECT_SLUG}}/src/pages/auth/AuthLanding.tsx')",
+      "Bash(diskutil info *)",
+      "Bash(mount)",
+      "Bash(bash -n template/scripts/clean-appledouble.sh)",
+      "Bash(bash -n template/scripts/prebuild.sh)",
+      "Bash(bash -n template/scripts/run-ios.sh)",
+      "Bash(bash -n template/install.sh)",
+      "WebSearch",
+      "Bash(tar -xzf expo-57.0.7.tgz package/bundledNativeModules.json)",
+      "Bash(npm -v)",
+      "Read(//dev/**)",
+      "Bash(npm ls *)",
+      "Bash(LC_ALL=C sed -i '' -e 's/dotenv\\\\.config\\(\\)/dotenv.config\\({ quiet: true }\\)/' apps/api/app.ts apps/site-api/app.ts console/index.ts)",
+      "Bash(LC_ALL=C sed -i '' -e \"s/dotenv\\\\.config\\({ path: path.resolve\\(dirname, '.env'\\) }\\)/dotenv.config\\({ path: path.resolve\\(dirname, '.env'\\), quiet: true }\\)/\" core/knexfile.ts)",
+      "Bash(npx eslint *)",
+      "Bash(ln -sfn /private/tmp/claude-501/-Users-ligeiro-dev-umpordez-cli/12177a90-5ebe-47b5-977f-9bb132141080/scratchpad/acme/server/node_modules /Users/ligeiro/dev/umpordez-cli/template/server/node_modules)",
+      "Bash(rm -f tailwind.config.ts postcss.config.js)",
+      "Bash(cp ../../server/eslint.config.js eslint.config.js)",
+      "Bash(ln -sfn /private/tmp/claude-501/-Users-ligeiro-dev-umpordez-cli/12177a90-5ebe-47b5-977f-9bb132141080/scratchpad/acme/ui/admin/node_modules /Users/ligeiro/dev/umpordez-cli/template/ui/admin/node_modules)",
+      "Bash(awk '{print $2}')"
     ]
   }
 }

package/create.mjs

@@ -394,6 +394,104 @@ function validatePort(v) {
         : 'Must be a valid port number';
 }
 
+// Filesystems that can't store extended attributes or symlinks. On
+// macOS these make the OS scatter AppleDouble `._*` sidecar files next
+// to everything npm installs — CocoaPods then fails parsing a
+// `._Foo.podspec` during `expo prebuild`, and node_modules symlinks
+// break. Generating an Expo project on one of these is a trap, so we
+// warn before doing it.
+const NON_NATIVE_FS = new Set([
+    'exfat', 'msdos', 'fat32', 'vfat',
+    'ntfs', 'ntfs-3g', 'fuseblk',
+    'smbfs', 'cifs', 'nfs', 'afpfs', 'webdav',
+]);
+
+// Resolve the filesystem type backing `targetPath`. The output dir
+// usually doesn't exist yet, so we walk up to the nearest existing
+// ancestor, then match it against the longest mount point in `mount`.
+// Returns { mountPoint, fsType } or null (non-darwin, or undetectable).
+function volumeInfo(targetPath) {
+    if (process.platform !== 'darwin') {
+        return null;
+    }
+
+    let dir = path.resolve(targetPath);
+    while (dir !== path.dirname(dir) && !fs.existsSync(dir)) {
+        dir = path.dirname(dir);
+    }
+
+    let mounts;
+    try {
+        mounts = execSync('mount', { encoding: 'utf-8' });
+    } catch {
+        return null;
+    }
+
+    // Lines look like: `/dev/disk10s1 on /Volumes/big (exfat, local, …)`
+    let best = null;
+    for (const line of mounts.split('\n')) {
+        const m = line.match(/ on (.+?) \(([^,)]+)/);
+        if (!m) {
+            continue;
+        }
+        const mountPoint = m[1];
+        const fsType = m[2].trim().toLowerCase();
+        const prefix = mountPoint.endsWith('/') ? mountPoint : mountPoint + '/';
+        if (dir === mountPoint || dir.startsWith(prefix)) {
+            if (!best || mountPoint.length > best.mountPoint.length) {
+                best = { mountPoint, fsType };
+            }
+        }
+    }
+    return best;
+}
+
+// Warn (and confirm) before generating a mobile project onto a
+// filesystem macOS can't build native code on. Returns true to
+// proceed, false to abort. Only meaningful when a mobile app is part
+// of the project — the acute failure is CocoaPods + `expo prebuild`.
+async function confirmFilesystem(outputDir, components) {
+    if (!components.mobile) {
+        return true;
+    }
+    const vol = volumeInfo(outputDir);
+    if (!vol || !NON_NATIVE_FS.has(vol.fsType)) {
+        return true;
+    }
+
+    console.log('');
+    console.log(red.bold(
+        `  ⚠  ${vol.mountPoint} is a ${vol.fsType} volume.`
+    ));
+    console.log(dim(
+        '     macOS can\'t store extended attributes or symlinks there,'
+    ));
+    console.log(dim(
+        '     so it scatters AppleDouble `._*` files next to everything'
+    ));
+    console.log(dim(
+        '     npm installs. `expo prebuild` then fails when CocoaPods'
+    ));
+    console.log(dim(
+        '     tries to parse a `._Foo.podspec`, and node_modules'
+    ));
+    console.log(dim('     symlinks break.'));
+    console.log('');
+    console.log(dim(
+        '     Recommended: generate on your internal drive (e.g. ~/dev),'
+    ));
+    console.log(dim('     an APFS / Mac OS Extended volume.'));
+    console.log('');
+
+    const { proceed } = await inquirer.prompt([{
+        type: 'confirm',
+        name: 'proceed',
+        message: `Generate on the ${vol.fsType} volume anyway?`,
+        default: false,
+    }]);
+    return proceed;
+}
+
 function componentsLabel(c) {
     const parts = [];
     if (c.server)  parts.push('server API');
@@ -604,6 +702,11 @@ export async function createProject() {
 
     const outputDir = path.resolve(details.outputDir);
 
+    if (!await confirmFilesystem(outputDir, details.components)) {
+        console.log(chalk.yellow('Aborted. No files were created.'));
+        return;
+    }
+
     if (fs.existsSync(outputDir)) {
         const { overwrite } = await inquirer.prompt([{
             type: 'confirm',
@@ -710,6 +813,7 @@ export async function createProject() {
     if (details.components.mobile) {
         scripts.push(
             'scripts/bump-version.sh',
+            'scripts/clean-appledouble.sh',
             'scripts/prebuild.sh',
             'scripts/run-ios.sh',
             'scripts/release-android.sh',

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "umpordez",
     "type": "module",
-    "version": "1.5.0",
+    "version": "1.6.1",
     "description": "SaaS starter kit generator — server, admin SPA, public site (i18n), mobile app (offline-first, IAP, native push)",
     "main": "cli.mjs",
     "scripts": {
@@ -24,9 +24,9 @@
     },
     "homepage": "https://github.com/umpordez/cli#readme",
     "dependencies": {
-        "chalk": "^5.4.1",
-        "figlet": "^1.8.2",
-        "inquirer": "^12.7.0",
-        "sharp": "^0.33.5"
+        "chalk": "^5.6.2",
+        "figlet": "^1.11.2",
+        "inquirer": "^14.0.2",
+        "sharp": "^0.35.3"
     }
 }

package/template/.github/copilot-instructions.md

@@ -9,7 +9,7 @@ Multi-tenant SaaS application built with the **umpordez** architecture pattern f
 ## Tech Stack
 
 - **Backend:** TypeScript, Express.js, PostgreSQL, Knex.js, Zod
-- **Admin UI:** React 18, Vite, TailwindCSS, shadcn/ui (Radix), React Router DOM 6, TanStack Query v5, React Hook Form + Zod
+- **Admin UI:** React 19, Vite 8, TailwindCSS v4, shadcn/ui (Radix), React Router DOM 7, TanStack Query v5
 - **Site UI:** Express + EJS + TailwindCSS
 - **Auth:** httpOnly JWT cookies (30-day expiry)
 - **Uploads:** AWS S3 via multer-s3 with signed URLs

package/template/AGENTS.md

@@ -59,7 +59,7 @@ ui/site/               Public marketing site (Express + EJS, port 3000)
 ## Tech Stack
 
 - **Backend:** TypeScript, Express.js, PostgreSQL, Knex.js, Zod
-- **Admin UI:** React 18, Vite, TailwindCSS, shadcn/ui (Radix), React Router DOM 6, React Query (TanStack Query v5), React Hook Form + Zod, Recharts
+- **Admin UI:** React 19, Vite 8, TailwindCSS v4, shadcn/ui (Radix), React Router DOM 7, React Query (TanStack Query v5)
 - **Site UI:** Express + EJS + TailwindCSS
 - **Auth:** httpOnly JWT cookies (30-day expiry)
 - **Uploads:** AWS S3 via multer-s3 with signed URLs

package/template/gitignore

@@ -5,6 +5,8 @@ build/
 dist/
 *.log
 .DS_Store
+._*
+.AppleDouble
 *.swp
 *.swo
 *~

package/template/install.sh

@@ -55,6 +55,10 @@ if [ -d "mobile/{{PROJECT_SLUG}}" ]; then
 
         if [[ "$(uname)" == "Darwin" ]]; then
             if [ -d "mobile/{{PROJECT_SLUG}}/ios" ]; then
+                # Strip AppleDouble `._*` files (exFAT/NTFS/network
+                # volumes) so pod install doesn't choke on a
+                # `._Foo.podspec`. No-op on APFS.
+                ./scripts/clean-appledouble.sh "mobile/{{PROJECT_SLUG}}"
                 echo "Installing iOS pods..."
                 (cd "mobile/{{PROJECT_SLUG}}/ios" && pod install)
             fi

package/template/mobile/{{PROJECT_SLUG}}/README.md

@@ -6,11 +6,26 @@ typed fetch client pointed at the project's admin API.
 
 ## Quick start
 
+**This is a development-build app, not an Expo Go app.** It ships
+native modules (Apple Sign-In, `expo-build-properties`, and optionally
+`expo-iap`) and rides the newest Expo SDK, so the public Expo Go from
+the App Store either won't run it (`"requires a newer version of Expo
+Go"` right after an SDK release) or crashes on a native import. Use a
+development build instead — `expo-dev-client` is already a dependency:
+
 ```bash
 npm install
-npm run start          # Metro + QR — open with Expo Go for the JS-only flow
-npm run ios            # build + run on iOS (requires Xcode)
+npm run ios            # build + run a dev client on iOS (requires Xcode)
 npm run android        # build + run on Android (requires Android Studio)
+npm run start          # Metro — connect from an installed dev build
+```
+
+Need a device build without Xcode/Android Studio, or want the Expo Go
+experience on the current SDK? Use EAS-hosted Expo Go, which always
+matches the SDK you target (unlike the store build):
+
+```bash
+npx eas go             # installs a matching Expo Go for this SDK
 ```
 
 For a clean iOS run that picks a connected device automatically:

package/template/mobile/{{PROJECT_SLUG}}/package.json

@@ -9,7 +9,7 @@
         "ios": "expo run:ios",
         "web": "expo start --web",
         "prebuild": "bash ../../scripts/prebuild.sh",
-        "lint": "eslint src --ext .ts,.tsx",
+        "lint": "eslint \"src/**/*.{ts,tsx}\"",
         "typecheck": "tsc --noEmit"
     },
     "expo": {
@@ -20,41 +20,39 @@
     "dependencies": {
         "@noble/hashes": "^2.2.0",
         "@react-native-async-storage/async-storage": "2.2.0",
-        "@react-navigation/bottom-tabs": "^7.7.3",
-        "@react-navigation/native": "^7.1.19",
-        "@react-navigation/native-stack": "^7.6.2",
-        "expo": "~57.0.4",
-        "expo-apple-authentication": "~57.0.0",
-        "expo-auth-session": "~57.0.2",
-        "expo-build-properties": "~57.0.3",
-        "expo-constants": "~57.0.3",
-        "expo-file-system": "~57.0.0",{{IAP_DEP_JSON}}
-        "expo-linking": "~57.0.2",
-        "expo-localization": "~57.0.0",
-        "expo-splash-screen": "~57.0.2",
-        "expo-sqlite": "~57.0.0",
-        "expo-status-bar": "~57.0.0",
-        "expo-system-ui": "~57.0.0",
-        "expo-web-browser": "~57.0.0",
-        "i18next": "^23.16.5",
-        "lucide-react-native": "^1.24.0",
+        "@react-navigation/bottom-tabs": "^7.18.11",
+        "@react-navigation/native": "^7.3.11",
+        "@react-navigation/native-stack": "^7.18.3",
+        "expo": "~57.0.7",
+        "expo-apple-authentication": "~57.0.1",
+        "expo-build-properties": "~57.0.6",
+        "expo-constants": "~57.0.6",
+        "expo-dev-client": "~57.0.7",
+        "expo-file-system": "~57.0.1",{{IAP_DEP_JSON}}
+        "expo-localization": "~57.0.1",
+        "expo-splash-screen": "~57.0.4",
+        "expo-sqlite": "~57.0.1",
+        "expo-system-ui": "~57.0.1",
+        "expo-web-browser": "~57.0.1",
+        "i18next": "^23.16.8",
+        "lucide-react-native": "^1.25.0",
         "react": "19.2.3",
         "react-native": "0.86.0",
-        "react-i18next": "^15.1.1",
+        "react-i18next": "^15.7.4",
         "react-native-gesture-handler": "~2.32.0",
         "react-native-reanimated": "4.5.0",
         "react-native-safe-area-context": "~5.7.0",
         "react-native-screens": "4.25.2",
         "react-native-svg": "15.15.4",
-        "react-native-toast-message": "^2.3.3",
+        "react-native-toast-message": "^2.4.0",
         "react-native-worklets": "0.10.0"
     },
     "devDependencies": {
-        "@stylistic/eslint-plugin": "^2.13.0",
+        "@stylistic/eslint-plugin": "^5.10.0",
         "@types/react": "~19.2.2",
-        "babel-preset-expo": "~57.0.2",
-        "eslint": "^9.20.1",
+        "babel-preset-expo": "~57.0.3",
+        "eslint": "^10.7.0",
         "typescript": "~5.9.3",
-        "typescript-eslint": "^8.24.0"
+        "typescript-eslint": "^8.64.0"
     }
 }

package/template/scripts/clean-appledouble.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+#
+# clean-appledouble — remove macOS AppleDouble `._*` sidecar files.
+#
+# macOS drops a `._<name>` metadata file next to every file that carries
+# extended attributes when it lives on a filesystem that can't store
+# xattrs natively (exFAT, MS-DOS/FAT, NTFS, SMB/NFS network mounts).
+# CocoaPods then scans for `*.podspec`, finds `._Foo.podspec`, tries to
+# parse the binary metadata as Ruby, and `pod install` — and therefore
+# `expo prebuild` / `expo run:ios` — dies with:
+#
+#   Invalid `Podfile` file: Invalid podspec file at path
+#   .../node_modules/.../ios/._Foo.podspec
+#
+# On APFS / Mac OS Extended there are none, so this is a fast no-op. Run
+# it before any pod install / prebuild / native build.
+#
+# The real fix is to keep the project on an APFS / Mac OS Extended disk
+# (e.g. ~/dev) — exFAT/NTFS regenerate these files on every npm install.
+#
+# Usage: ./scripts/clean-appledouble.sh [dir]   (default: repo root)
+
+set -euo pipefail
+
+# AppleDouble files are a macOS-only artifact.
+[[ "$(uname)" == "Darwin" ]] || exit 0
+
+TARGET="${1:-$(cd "$(dirname "$0")/.." && pwd)}"
+[[ -d "$TARGET" ]] || exit 0
+
+n=$(
+    find "$TARGET" -name '._*' -type f -print -delete 2>/dev/null \
+        | wc -l | tr -d ' '
+)
+
+if [[ "${n:-0}" -gt 0 ]]; then
+    echo "==> Removed $n AppleDouble ._* file(s) under $TARGET"
+    echo "    This disk can't store macOS extended attributes (likely"
+    echo "    exFAT/NTFS/network), so they'll return on the next npm"
+    echo "    install. For clean native builds, move the project to an"
+    echo "    APFS / Mac OS Extended disk (e.g. ~/dev)."
+fi

package/template/scripts/prebuild.sh

@@ -24,5 +24,12 @@ for arg in "$@"; do
     esac
 done
 
-cd "$(dirname "$0")/../mobile/{{PROJECT_SLUG}}"
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+cd "$SCRIPT_DIR/../mobile/{{PROJECT_SLUG}}"
+
+# Strip macOS AppleDouble `._*` files before prebuild — CocoaPods
+# chokes on `._Foo.podspec` when the project lives on exFAT/NTFS/network
+# volumes. No-op on APFS. See scripts/clean-appledouble.sh.
+"$SCRIPT_DIR/clean-appledouble.sh" "$PWD"
+
 exec npx expo prebuild "$@"

package/template/scripts/run-ios.sh

@@ -53,6 +53,11 @@ done
 
 cd "$APP_DIR"
 
+# Strip macOS AppleDouble `._*` files so the pod install triggered by
+# `expo run:ios` doesn't choke on `._Foo.podspec` (exFAT/NTFS/network
+# volumes). No-op on APFS. See scripts/clean-appledouble.sh.
+"$SCRIPT_DIR/clean-appledouble.sh" "$APP_DIR"
+
 if [[ $CLEAN -eq 1 ]]; then
     echo "==> Cleaning iOS build artifacts..."
     rm -rf ios/build

package/template/server/apps/api/app.ts

@@ -1,5 +1,5 @@
 import dotenv from 'dotenv';
-dotenv.config();
+dotenv.config({ quiet: true });
 
 import express from 'express';
 import cors from 'cors';

package/template/server/apps/api/routes/account.ts

@@ -1,20 +1,22 @@
 import type { Express, Request, Response } from 'express';
 import express from 'express';
 import { z } from 'zod';
-import trySetUserByTokenMiddleware from '#shared/middlewares/try-set-user-by-token.js';
+import trySetUserByTokenMiddleware
+    from '#shared/middlewares/try-set-user-by-token.js';
 import demandUserMiddleware from '#shared/middlewares/demand-user.js';
-import demandAccountAccessMiddleware from '#shared/middlewares/demand-account-access.js';
+import demandAccountAccessMiddleware
+    from '#shared/middlewares/demand-account-access.js';
 import { buildHandler } from '#shared/utils.js';
 
 const router = express.Router();
 
 const updateSettingsSchema = z.object({
     name: z.string().min(1, 'Nome é obrigatório'),
-    settings: z.record(z.unknown()).optional()
+    settings: z.record(z.string(), z.unknown()).optional()
 });
 
 const addMemberSchema = z.object({
-    email: z.string().email('Email inválido'),
+    email: z.email('Email inválido'),
     role: z.enum(['owner', 'manager', 'user']).default('user'),
     name: z.string().min(1).optional(),
     password: z.string().min(6).optional()
@@ -41,14 +43,21 @@ async function handleGetSettings(req: Request, res: Response): Promise<void> {
     res.json({ ok: true, account });
 }
 
-async function handleUpdateSettings(req: Request, res: Response): Promise<void> {
+async function handleUpdateSettings(
+    req: Request,
+    res: Response
+): Promise<void> {
     const data = updateSettingsSchema.parse(req.body);
     const account = await req.context.account.update(req.accountId!, data);
     res.json({ ok: true, account });
 }
 
 async function handleDeleteAccount(req: Request, res: Response): Promise<void> {
-    await req.context.account.delete(req.accountId!, req.user!.id, req.accountRole!);
+    await req.context.account.delete(
+        req.accountId!,
+        req.user!.id,
+        req.accountRole!
+    );
     res.json({ ok: true });
 }
 
@@ -57,7 +66,10 @@ async function handleListMembers(req: Request, res: Response): Promise<void> {
     const limit = parseInt(req.query.limit as string) || 20;
     const search = (req.query.search as string) || '';
 
-    const result = await req.context.account.listMembers(req.accountId!, { page, limit, search });
+    const result = await req.context.account.listMembers(
+        req.accountId!,
+        { page, limit, search }
+    );
     res.json({ ok: true, ...result });
 }
 
@@ -67,14 +79,24 @@ async function handleAddMember(req: Request, res: Response): Promise<void> {
     res.json({ ok: true, member });
 }
 
-async function handleUpdateMemberRole(req: Request, res: Response): Promise<void> {
+async function handleUpdateMemberRole(
+    req: Request,
+    res: Response
+): Promise<void> {
     const { role } = updateMemberRoleSchema.parse(req.body);
-    await req.context.account.updateMemberRole(req.accountId!, (req.params.userId as string), role);
+    await req.context.account.updateMemberRole(
+        req.accountId!,
+        req.params.userId as string,
+        role
+    );
     res.json({ ok: true });
 }
 
 async function handleRemoveMember(req: Request, res: Response): Promise<void> {
-    await req.context.account.removeMember(req.accountId!, (req.params.userId as string));
+    await req.context.account.removeMember(
+        req.accountId!,
+        req.params.userId as string
+    );
     res.json({ ok: true });
 }
 

package/template/server/apps/api/routes/admin.ts

@@ -1,25 +1,29 @@
 import type { Express, Request, Response } from 'express';
 import express from 'express';
 import { z } from 'zod';
-import trySetUserByTokenMiddleware from '#shared/middlewares/try-set-user-by-token.js';
+import trySetUserByTokenMiddleware
+    from '#shared/middlewares/try-set-user-by-token.js';
 import demandUserMiddleware from '#shared/middlewares/demand-user.js';
-import demandAdminUserMiddleware from '#shared/middlewares/demand-admin-user.js';
+import demandAdminUserMiddleware
+    from '#shared/middlewares/demand-admin-user.js';
 import { buildHandler } from '#shared/utils.js';
 
 const router = express.Router();
 
 const createUserSchema = z.object({
     name: z.string().min(1, 'Nome é obrigatório'),
-    email: z.string().email('Email inválido'),
+    email: z.email('Email inválido'),
     password: z.string().min(6, 'Senha deve ter no mínimo 6 caracteres'),
     role: z.enum(['admin', 'user']).default('user')
 });
 
 const updateUserSchema = z.object({
     name: z.string().min(1, 'Nome é obrigatório'),
-    email: z.string().email('Email inválido'),
+    email: z.email('Email inválido'),
     role: z.enum(['admin', 'user']).optional(),
-    password: z.string().min(6, 'Senha deve ter no mínimo 6 caracteres').optional()
+    password: z.string()
+        .min(6, 'Senha deve ter no mínimo 6 caracteres')
+        .optional()
 });
 
 async function handleGetDashboard(req: Request, res: Response): Promise<void> {
@@ -53,7 +57,10 @@ async function handleCreateUser(req: Request, res: Response): Promise<void> {
 
 async function handleUpdateUser(req: Request, res: Response): Promise<void> {
     const data = updateUserSchema.parse(req.body);
-    const user = await req.context.user.adminUpdate((req.params.id as string), data);
+    const user = await req.context.user.adminUpdate(
+        req.params.id as string,
+        data
+    );
     res.json({ ok: true, user });
 }